$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.mft File: 9caf1aed-80da-474d-8e77-0000ca0d6025.mft (raw, json) Hash identifier: qO4dNzsolC0y3ObyAz9VyXaMPYcJuPO1WBTRg997lTc= Subject key identifier: D1:0A:CD:5F:06:76:C9:E5:56:00:72:95:65:72:A3:9E:4E:18:91:2E Authority key identifier: 10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B Certificate issuer: /CN=9caf1aed-80da-474d-8e77-0000ca0d6025 Certificate serial: 010D0C9F4328584B94242A67B87D3F3154EA4500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.mft Manifest number: 010D0C9F4328584AD920445417336BD28E4092C3 Signing time: Mon 20 Oct 2025 00:00:08 +0000 Manifest this update: Mon 20 Oct 2025 00:00:08 +0000 Manifest next update: Wed 22 Oct 2025 00:00:00 +0000 Files and hashes: 1: 4b8af66a-af1d-325a-b05b-ca5f14d05fb6.roa (hash: bEFTjAtZTjIK8cp3trDJgtJ4vQH5HS2v5AnPIeUgFZA=) 2: 9caf1aed-80da-474d-8e77-0000ca0d6025.crl (hash: 34TsnvJqC1RYXPmoDXwAyXipfxI3adIL692t9e87YZU=) 3: cb8dfe46-45a8-3613-b90e-91142e177fbf.roa (hash: PMFoS47alTQPL0ksmt19oXanoRldi77rXA2amOdsAFc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:24:2a:67:b8:7d:3f:31:54:ea:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9caf1aed-80da-474d-8e77-0000ca0d6025 Validity Not Before: Oct 20 00:00:08 2025 GMT Not After : Oct 22 00:00:00 2025 GMT Subject: CN=d60065b8-f043-4d80-98ea-2b6460a3d752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:85:d4:53:4b:5f:df:e3:b7:f5:e9:84:27:9b: 3d:2b:6a:71:e9:98:1b:bc:b9:99:ee:56:a5:c3:5e: d6:ef:54:91:90:d5:9f:00:77:7b:ae:b0:09:08:16: a4:f6:5e:54:a8:67:91:b7:fe:b9:20:3a:83:85:fd: 3e:6d:b9:6f:e9:8b:be:ac:3e:d8:7a:22:a8:e8:8a: fa:f1:b5:eb:f6:55:98:b8:f0:b9:29:34:69:ab:c3: 14:2b:b8:bf:c5:3f:28:d1:23:24:22:d9:d4:32:31: 26:d3:77:5f:77:88:d5:30:06:c4:c2:26:63:42:b8: ca:f4:aa:23:89:f9:c3:79:e8:c3:54:5c:e1:c5:e3: bc:58:5b:86:e7:2e:8f:85:01:77:6b:ba:97:ad:2d: e9:ee:5e:41:cc:3b:01:2b:f2:37:46:13:a9:20:37: ac:a7:5e:8f:5c:66:10:66:0b:83:85:55:06:73:f7: 7c:0e:49:fc:ca:df:a9:ab:fa:f2:7b:7c:54:09:af: 9a:c8:62:21:a1:cf:4d:32:63:f7:1a:3e:b7:8c:d6: 4e:fc:8b:bc:69:cf:b9:11:90:c8:b5:62:89:d5:36: cc:c6:04:e1:98:de:39:4b:b5:0a:0e:f9:93:78:cf: bb:07:fd:ba:91:9a:95:48:e6:23:eb:5a:d7:8e:2f: 67:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0A:CD:5F:06:76:C9:E5:56:00:72:95:65:72:A3:9E:4E:18:91:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.crl X509v3 Authority Key Identifier: keyid:10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e6:4d:20:33:44:3a:2a:dd:30:0a:43:9d:ef:08:8f:04:bc: bf:a2:e4:1b:ae:93:96:ee:ac:cd:12:f9:e9:00:35:65:56:08: 90:de:dd:69:40:cb:51:06:ba:41:a2:a1:9c:43:ce:b7:26:de: 87:e6:30:2e:73:18:0a:ea:e2:dd:d2:53:5e:5c:cd:13:71:74: e5:00:04:35:31:95:5a:46:2f:e0:b0:3f:b5:7e:04:1e:9c:1a: f7:28:e0:c0:40:bf:b9:4a:22:fe:b2:6c:e0:46:cb:12:c3:41: ef:7a:31:b5:c3:be:c9:53:56:ac:9c:ab:b2:3a:15:9d:1f:a3: 96:55:68:35:93:f3:0b:c6:e0:b9:35:46:f2:3f:ee:79:08:d4: 83:35:38:a5:f1:be:31:e5:0f:c1:e8:f9:dd:22:66:c3:86:61: 1a:ce:cb:a9:e1:9e:73:17:79:a7:e5:f1:27:36:ab:b8:6e:23: cc:d8:61:bd:8a:83:6f:74:43:7f:55:dc:93:b9:4a:7e:fe:5c: d6:8b:72:d0:71:09:db:22:d4:24:e2:1b:7c:97:be:86:d3:03: bf:80:da:7e:90:8a:71:30:34:e7:6c:a5:3b:40:76:39:45:93: ac:ef:3f:90:f0:50:ca:86:27:41:20:0f:7c:26:f6:cc:3f:65: 44:52:3f:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuUJCpnuH0/MVTqRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZjFhZWQtODBkYS00NzRkLThlNzctMDAwMGNhMGQ2 MDI1MB4XDTI1MTAyMDAwMDAwOFoXDTI1MTAyMjAwMDAwMFowLzEtMCsGA1UEAxMk ZDYwMDY1YjgtZjA0My00ZDgwLTk4ZWEtMmI2NDYwYTNkNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYXUU0tf3+O39emEJ5s9K2px6ZgbvLmZ7lal w17W71SRkNWfAHd7rrAJCBak9l5UqGeRt/65IDqDhf0+bblv6Yu+rD7YeiKo6Ir6 8bXr9lWYuPC5KTRpq8MUK7i/xT8o0SMkItnUMjEm03dfd4jVMAbEwiZjQrjK9Koj ifnDeejDVFzhxeO8WFuG5y6PhQF3a7qXrS3p7l5BzDsBK/I3RhOpIDesp16PXGYQ ZguDhVUGc/d8Dkn8yt+pq/rye3xUCa+ayGIhoc9NMmP3Gj63jNZO/Iu8ac+5EZDI tWKJ1TbMxgThmN45S7UKDvmTeM+7B/26kZqVSOYj61rXji9nJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNEKzV8GdsnlVgBylWVyo55OGJEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Y2Fm MWFlZC04MGRhLTQ3NGQtOGU3Ny0wMDAwY2EwZDYwMjUvOWNhZjFhZWQtODBkYS00 NzRkLThlNzctMDAwMGNhMGQ2MDI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWNhZjFhZWQtODBkYS00NzRkLThl NzctMDAwMGNhMGQ2MDI1LzljYWYxYWVkLTgwZGEtNDc0ZC04ZTc3LTAwMDBjYTBk NjAyNS5jcmwwHwYDVR0jBBgwFoAUEOs5P4bIZlPGQR7UjZfrcZlM5iswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85Y2FmMWFlZC04MGRhLTQ3NGQtOGU3Ny0wMDAw Y2EwZDYwMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+5k0gM0Q6Kt0wCkOd7wiP BLy/ouQbrpOW7qzNEvnpADVlVgiQ3t1pQMtRBrpBoqGcQ863Jt6H5jAucxgK6uLd 0lNeXM0TcXTlAAQ1MZVaRi/gsD+1fgQenBr3KODAQL+5SiL+smzgRssSw0HvejG1 w77JU1asnKuyOhWdH6OWVWg1k/MLxuC5NUbyP+55CNSDNTil8b4x5Q/B6PndImbD hmEazsup4Z5zF3mn5fEnNqu4biPM2GG9ioNvdEN/VdyTuUp+/lzWi3LQcQnbItQk 4ht8l76G0wO/gNp+kIpxMDTnbKU7QHY5RZOs7z+Q8FDKhidBIA98JvbMP2VEUj8g -----END CERTIFICATE-----Generated at Mon Oct 20 11:18:19 2025 by rpki-client